Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/3137372e3230302e3133362e302f32322d3232203d3e20323730393137.roa
File:                     3137372e3230302e3133362e302f32322d3232203d3e20323730393137.roa (raw, json)
Hash identifier:          DxPBo49lriFRuN3g/q8xC8zbOAwwdorsuVZm1Tl7GDE=
Subject key identifier:   AB:77:73:0D:40:25:0D:BF:13:72:A0:D4:7E:22:7B:23:98:27:3B:AD
Certificate issuer:       /CN=F5A50CCC294040F07C9C735FE2A2A8031034D7F3
Certificate serial:       6D6F06CF7E66097DE40357B907F686B57C5F8E1A
Authority key identifier: F5:A5:0C:CC:29:40:40:F0:7C:9C:73:5F:E2:A2:A8:03:10:34:D7:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A50CCC294040F07C9C735FE2A2A8031034D7F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/3137372e3230302e3133362e302f32322d3232203d3e20323730393137.roa
Signing time:             Tue 05 Nov 2024 14:15:04 +0000
ROA not before:           Tue 05 Nov 2024 14:10:04 +0000
ROA not after:            Tue 04 Nov 2025 14:15:04 +0000
asID:                     270917
IP address blocks:        177.200.136.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/F5A50CCC294040F07C9C735FE2A2A8031034D7F3.crl
                          rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/F5A50CCC294040F07C9C735FE2A2A8031034D7F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A50CCC294040F07C9C735FE2A2A8031034D7F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:6f:06:cf:7e:66:09:7d:e4:03:57:b9:07:f6:86:b5:7c:5f:8e:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A50CCC294040F07C9C735FE2A2A8031034D7F3
        Validity
            Not Before: Nov  5 14:10:04 2024 GMT
            Not After : Nov  4 14:15:04 2025 GMT
        Subject: CN=AB77730D40250DBF1372A0D47E227B2398273BAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:bb:ee:66:9b:d2:75:6d:48:08:18:3e:d2:97:
                    ee:6d:0b:c3:0d:ff:9d:91:dd:64:fa:eb:90:79:5a:
                    64:dc:d3:76:a1:f1:48:9e:a3:c0:1f:7b:23:90:23:
                    83:d9:83:2a:a0:b6:8d:2b:e5:39:e1:3e:20:89:2f:
                    a5:1f:4c:02:cd:a2:38:a6:ad:b4:88:ac:22:e7:22:
                    e2:7b:85:fc:c1:37:bf:63:a7:fa:cb:b8:f6:b6:ab:
                    99:4e:4b:96:ec:fc:68:30:93:ce:b3:c2:ae:43:3f:
                    64:db:4f:6a:c1:fd:33:9d:21:2b:89:f1:2b:1f:ab:
                    b9:db:0e:d2:64:9c:e6:b9:62:47:54:ae:c5:2f:91:
                    3e:dc:bf:6a:4b:96:b4:ee:c8:fa:f6:cb:32:de:c7:
                    0c:61:3b:9c:06:2c:3c:2c:64:07:d7:bb:bd:25:54:
                    84:10:6c:68:51:54:14:1a:ad:80:fd:8e:16:63:19:
                    d1:de:2d:36:2a:75:03:41:8e:18:b9:54:c6:bd:20:
                    fa:a9:f2:ea:13:22:70:53:5b:a3:b0:6f:39:f6:93:
                    6a:de:c2:32:50:a4:c6:6b:6c:6c:c7:80:6d:fe:76:
                    a4:14:da:db:85:75:24:85:21:e5:70:82:64:12:5a:
                    5e:37:67:8b:a1:bd:fd:ec:10:4a:f3:18:85:6c:d0:
                    ae:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:77:73:0D:40:25:0D:BF:13:72:A0:D4:7E:22:7B:23:98:27:3B:AD
            X509v3 Authority Key Identifier:
                keyid:F5:A5:0C:CC:29:40:40:F0:7C:9C:73:5F:E2:A2:A8:03:10:34:D7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/F5A50CCC294040F07C9C735FE2A2A8031034D7F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A50CCC294040F07C9C735FE2A2A8031034D7F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/3137372e3230302e3133362e302f32322d3232203d3e20323730393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:9f:ee:d3:a2:97:5f:9c:8f:6a:aa:47:96:88:6e:38:7d:3d:
         40:d5:ab:ce:3a:f4:fb:a0:87:97:66:56:34:92:0b:2a:26:19:
         ed:9e:ce:17:67:ef:9c:a0:60:40:be:83:b3:ee:06:67:22:c1:
         9a:c1:d4:91:94:4b:97:80:3c:9d:80:55:d0:ab:c4:52:3c:90:
         75:07:90:6c:63:13:ac:47:87:d4:ea:75:a4:15:a0:fd:07:03:
         f6:d0:d7:71:d8:b3:7a:8b:d6:e1:52:22:29:0d:1a:9d:a7:94:
         61:62:00:5e:ed:fb:d7:88:12:50:d4:fc:0c:cd:63:b6:4f:af:
         d2:84:66:de:1d:a0:a6:bf:92:d0:b3:ce:15:bd:fd:a9:de:b6:
         39:0a:b9:e3:f6:28:a1:4e:1a:73:f1:0f:35:a3:ec:4a:35:0f:
         3a:0a:54:31:0e:c5:b6:f2:1f:a2:76:a5:df:a7:b0:ed:c4:5d:
         7f:d7:92:06:a8:a9:bd:b5:d2:64:53:81:44:8c:0c:ec:89:fa:
         8b:2d:49:b2:77:4d:4f:6a:48:dc:19:16:cd:3a:2e:5c:c7:20:
         4a:e0:17:11:f6:96:50:3e:49:97:e4:c3:7f:9b:06:0c:d5:87:
         5c:e2:6b:bf:3e:b8:4f:ad:b3:4d:b9:00:6f:49:95:2d:83:c3:
         30:b3:da:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:19 2024 by rpki-client on console-ams.rpki-client.org